Using SDN technology to solve the method of consistent update of distributed firewall network

Abstract

The invention discloses a method for solving consistent update of a distributed firewall network through utilization of an SDN (Software Defined Network) technology. According to the method, through utilization of an SDN, a user is supported to define development according to own practical demand; a controller is enabled to issue different flow tables to online switches in a mode of carrying out programming through an API (Application Program Interface), so a step of configuring each switch one by one is removed, influences of update of the configuration in the switches on transmitted data messages and original network security rules are no longer taken into consideration, and the configuration difficulty of distributed firewalls is solved. According to the method, the switches are automatically configured by issuing the flow tables through programming, and the consistent update of the distributed firewalls can be finished.

Description

technical field [0001] The invention relates to software and network technology, in particular to a method for solving the consistent update of distributed firewall networks by using SDN technology. Background technique [0002] In the era of big data where the network scale is growing rapidly, the problem of consistent update of the network is becoming increasingly prominent. Even if we are careful to make the old and new configurations accurate, it will be difficult to implement them correctly. , data packet loss or network congestion and other problems. The main reason is that the network is a distributed system, and it is difficult for algorithms to achieve distributed management. Sometimes network administrators are required to manually verify that a series of updates to the network are correct, but this process is tedious and error-prone. [0003] Usually, the network needs to update the configuration, such as maintenance and upgrading of network equipment, or to pre...

AI Technical Summary

Problems solved by technology

If there is no strategy to implement simply, it will affect the security of the network, which is never allowed in the network

[0004] Under the existing technology, if we want to update the network, we must either update the entire network environment in a versioned manner, or power off the devices, and then configure them one by one. The way to update the version is too complicated to manually configure. To achieve consistent updates of the network, although it can continue to be applicable to some application scenarios, it is no longer the mainstream in today's fast-speed and low-latency big data environment

Images